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Subject 
- desire to perform - 
Safety Risk Analysis 



Assemble a Review Team^ 



I 



Identify inherent Hazards 
of the Subject 




Preliminary 
Hazard 
Assessment 
[PHA] 



28 



DOCUMENT and 

Catalog for future 
reference / search 



V YES 



Based on the inherent Hazards and the 
Known Operation of the Product / System 

Analyze Design Deviations or 
Modes of Operation that may cause Hazards 
creating or contributing to an Unsafe Condition 

Identify Existing Controls that mitigate the Risk of the Unsafe 
Condition and Verifications of those Controls 

Determine 

1) the potential Severity of the Unsafe Condition 
2) the Likelihood of this Specific Hazard Occurring 
Risk = Severity x Likelihood 



Identify Actions 
that can be taken 
to mitigate the current 
Risk Level 



YES 



Are there 
"TReadily Apparent^ 
''specific actions that can 
?educe the Risk of this^ 
s^pecific Hazard^ 
? 

NO 



DOCUMENT and Catalog for 
future reference / search 



Figure 2 



Hazardous 
Operations 
Review 
[HAZ^Op] 
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Is the current identified 
Severity Level of the Identified 
Unsafe Condition(s), greater 
than a Pre-Defined 
Critical Level 

9 

YES 



NO 



DOCUMENT and 
Catalog for future 
reference / search 



Define in Detail how the Unsafe Condition is a 
Contributory Step (or Hazard) in one or more Scenarios 
that lead to an Accident 



Arrange the Single Step Contributory Hazards 
from this Product / System with Contributory Hazards from 
other Products / Systems or Outside World Influences 
to Complete the Accident Scenario Demonstrating a 
Credible path through Contributory Hazards to the 
Unsafe Condition to Harm 



Incorporate previously identified 
Risk Mitigating Controls and the 
Verifications of those Controls. 

Analyze the Residual Risk of the Accident 
Scenario resulting in Harm by first 
analyzing the Individual Risk of each 
Contributory step (Hazard) allowing the 
Scenario to Propagate 



Identify Actions 
that may be taken 
to Further mitigate the current 
Residual Risk Level 



Figure 3 




Accident 
Scenario 
Review 
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DOCUMENT and Catalog for 
future reference / search 



Track All Actions to 
Completion 

Re-visit and Re- 
Evaluate as 

necessary 



DOCUMENT and Catalog for 
future reference / search 



Figure 4 
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Preliminary Hazard 

Assessment 
Safety Risk Analysis 




Determine a Rational 
Break-Down 
Structure of the 
whole into parts 
and Identify the Order 
in which to begin 
analyzing each 
identified part 



Subject Owners / Experts 



Provide an Overview of: 
1) Product / System Purpose 
2) intended Operation 
3) Operating Constituents (e.g. materials, fluids, etc) 
4) Operating Parameters (e.g. Flow rates. Temperatures, etc) 
5) Overall Geometry or Design 



Identify Hazards Inherently 
associated with any 
of the features from the step above 
[e.g. Steam - Hot / Burn 
Cutting Blades - Sharp / Cut] 



T 



Identify the Relevant 
Portion in the Life Cycle of the 
Subject when the 

Inherent Hazard is active 



Identify and List 
the Readily Apparent 
Features that Control or Mitigate 
the risk of the Inherent Hazard causing an 
Unsafe Condition 



Figure 5 
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Summarize the 
SAFETY CTQ's of the 
Subject 

(the Critical to Quality or primary drivers to 
assure safety) 



Determine and List 
other Components / Systems 
that interact with the Subject 



Determine and List 
all current documentation 
used to define and / or control the subject, its 
use, maintenance or installation 



Determine and List 
readily apparent 
parameters / indicators / geometries, etc 
that may be used in a Safety Audit of the 

Subject 



Are there identified 
Unsafe Conditions that 
may result from an 
uncontrolled 
Inherent Hazard 



YES 



NO 
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Proceed to 
Hazardous Operations Review 
(Figure 7) 



Figure 6 
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^ From Preliminary 

Hazard Assessment 
^ (Figure 6) ^ 









Using the Information 
Captured by the Preliminary Hazard Assessment, 



Identify 
Design Deviations 
Modes of Operation 
Personnel interaction 
that may create a Hazard 
That would cause or contribute to an Unsafe Condition 

Focus on Single Point failures 



Crate a Guide-Word Matrix of 
1 ) Subject features / operating modes / parameters 
2) Deviations, anomalies, off-design operation 



y 

Review Team Checks / Edits the Guide-Word Matrix 



Review Team Creates 
Haz_Op Table to address 
Each defined Parameter and its associated Deviation 
from the Guide-Word Matrix - the Table captures 
1) the Cause of Parameter / Deviation 
2) the Consequential Hazard or the Parameter / Deviation 

3) the Controls that mitigate the Hazard 
4) the Verifications that assure the Controls are working 




Figure 7 
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0 



Review Team 
Considers the Severity Level of the 
Hazard and record that level 

in the appropriate Column 



Review Team 
Considers the Likelihood of the Hazard occurring 
with the Current level of Control and Verification 
Record Likelihood in the appropriate column 






YES 
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NO 
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Figure 9 
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From Hazardous 
Operations Review 
(Figure 9) 



32 



For Unsafe Conditions with a potential 
Severity Level greater than a pre-defined 
Critical Level 

Define in Detail how the 
Unsafe Condition is brought about 



First Identify Initiating Hazards - e.g. 
Design, Manufacturing, Installation, Operation and Maintenance 

Create a logical path from Initiating Hazards through 
Contributory Steps (or Hazards) from one 
or more Haz_Op Tables and known outside worid influences 

These Steps (or Hazards) should create a serial or parallel path(s) 
that are considered credible by the Review Team 

The final steps must include the presence (or non-presence) of 
personnel interaction with the Unsafe Condition 
and Identify the type(s) of Harm that may occur 



The Review Team 
Considers and Determines (or verifies) the Severity 
Level for each identified type of Harm 




Figure 10 
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9 



^ ^ 


Incorporate previously identified 
Risl< l\/litigating Controls and the 
Verifications of tliose Controls 




I 



Identify 
Actions 
that may be taken 
to Furtlier 
Reduce 
the current 
Lil^elihood Level 
of this Step 



YES 



Step-Wise 
The Review Team Considers 

each consecutive Hazard 
in the path and to what degree 
the identified Hazard Controls and the 
Verifications of those Controls 
would successfully stop the 
Accident Scenario f rom proceeding 

The Review Team 
Assigns a 

Likelihood Level that 
this step (or Hazard) will 
continue to the next 




^ Are there 
Readily Apparent 
specific actions 
that can Reduce 
the Risk of the 
Unsafe Condition 
or the Identified 
Harm? 



YES 



NO 



is the Likelihood 
too high that the 
Accident Scenario 
will Proceed 
? 

NO 



"Have all steps (or 
Hazards) been 
considered and 

Likelihood 
Determined for all 
.Credible Paths 



Proceed to the 
Next Step (or 
Hazard) in the 
Scenario 



NO 




Figure 11 
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DOCUMENT and 
Catalog for future 
reference / s 



Review Team to Determine tine Residual 
Risl^ of the Accident Scenario proceeding 
througii the Unsafe Condition to 
the End Harm by analyzing the Likelihood 
paths and the previously determined 
Severity Level 



YES 




Review and Determine means to: 

1 ) Incorporate further Controls or 
Verifications to reduce the Likelihood 
of Proceeding at key steps 

2) Change the Overall Scenario such 
that the Severity of the Harm is 
Reduced 




Figure 12 
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Assign actions to responsible parties to 

1) enact further Controls or 

2) create New Controls or 

3) fundamentally change the system 

to reduce the Likelihood of occun-ence 
or the overall Severity of the Harm 



Track All Actions 
to 

Completion 

Re-Evaluate as 
necessary 
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future reference / search 




Figure 13 
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^ Subject ^ 




-desire to perform- | 




^Safety Risk Analysis j 






Identify Inherent Hazards 


of the Subject 
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Consider the effect 
of these changes 

on the whole 
Product / System 



52 



Identify Actions 
that may be taken 
to Further Reduce the 
Risk Level 



NO 



Are there 
^Unsafe Conditions that 
jnay result from an Uncontrolled 
jnherent Ha2ard(s) 



YES 



■42 
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Preliminary 
Hazard 
Assessment 
[PHA] 



Identify Single Point Failures 

(or even normal operation) 
that lead to Unsafe Conditions based 
on the Identified inherent Hazards 



Identify Controls and Verifications 
to prevent the Single Point Failures 
or mitigate the Unsafe Condition 



■44 



Would the 
Identified Unsafe condition{s)' 
Result in Harm of 
JHigh Severity 
" ? ^ 

'yes ^"48 



NO 



Identify Multipoint Failures 
that lead to 
High Severity Unsafe Conditions 



Identify Controls and Verifications 
to prevent the multi-point failures 
or mitigate the Unsafe Condition 



Is the 
Overall Risk Level 
Acceptable 
? 

YES 
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40 



Hazardous 
Operations 
Review 
[Haz^Opl 
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Accident 
Scenario 
Review 



DOCUMENT and Catalog for 
future reference / search 



Figure 14 
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Input J 




Search Database 
of Prior Safety Reviews 
for Similar Products 



Evaluate 
Mitigating 
Factors 

a 



•68 



NO 



Conduct Safety 


Review 












Document Review 
Process and Store 
in Database 



Figure 15 



